Advisory Database Sync

Author: advisory-database[bot]

advisories/unreviewed/2025/10/GHSA-49pm-cgmh-hw25/GHSA-49pm-cgmh-hw25.json

@@ -1,7 +1,7 @@
 {
   "schema_version": "1.4.0",
   "id": "GHSA-49pm-cgmh-hw25",
-  "modified": "2026-01-05T12:30:28Z",
+  "modified": "2026-04-20T15:31:49Z",
   "published": "2025-10-30T06:30:53Z",
   "aliases": [
     "CVE-2025-62229"
@@ -19,10 +19,6 @@
       "type": "ADVISORY",
       "url": "https://nvd.nist.gov/vuln/detail/CVE-2025-62229"
     },
-    {
-      "type": "WEB",
-      "url": "https://access.redhat.com/errata/RHSA-2025:19432"
-    },
     {
       "type": "WEB",
       "url": "https://access.redhat.com/errata/RHSA-2025:22167"
@@ -91,6 +87,14 @@
       "type": "WEB",
       "url": "https://lists.debian.org/debian-lts-announce/2025/10/msg00033.html"
     },
+    {
+      "type": "WEB",
+      "url": "https://lists.x.org/archives/xorg-announce/2025-October/003635.html"
+    },
+    {
+      "type": "WEB",
+      "url": "https://access.redhat.com/errata/RHSA-2025:19432"
+    },
     {
       "type": "WEB",
       "url": "https://access.redhat.com/errata/RHSA-2025:19433"

advisories/unreviewed/2025/10/GHSA-892r-x96w-jh76/GHSA-892r-x96w-jh76.json

@@ -1,7 +1,7 @@
 {
   "schema_version": "1.4.0",
   "id": "GHSA-892r-x96w-jh76",
-  "modified": "2026-01-05T12:30:28Z",
+  "modified": "2026-04-20T15:31:49Z",
   "published": "2025-10-30T06:30:54Z",
   "aliases": [
     "CVE-2025-62230"
@@ -19,10 +19,6 @@
       "type": "ADVISORY",
       "url": "https://nvd.nist.gov/vuln/detail/CVE-2025-62230"
     },
-    {
-      "type": "WEB",
-      "url": "https://access.redhat.com/errata/RHSA-2025:19432"
-    },
     {
       "type": "WEB",
       "url": "https://access.redhat.com/errata/RHSA-2025:22167"
@@ -91,6 +87,14 @@
       "type": "WEB",
       "url": "https://lists.debian.org/debian-lts-announce/2025/10/msg00033.html"
     },
+    {
+      "type": "WEB",
+      "url": "https://lists.x.org/archives/xorg-announce/2025-October/003635.html"
+    },
+    {
+      "type": "WEB",
+      "url": "https://access.redhat.com/errata/RHSA-2025:19432"
+    },
     {
       "type": "WEB",
       "url": "https://access.redhat.com/errata/RHSA-2025:19433"

advisories/unreviewed/2025/10/GHSA-h4r4-6hvf-34r8/GHSA-h4r4-6hvf-34r8.json

@@ -1,7 +1,7 @@
 {
   "schema_version": "1.4.0",
   "id": "GHSA-h4r4-6hvf-34r8",
-  "modified": "2026-01-05T12:30:28Z",
+  "modified": "2026-04-20T15:31:48Z",
   "published": "2025-10-30T06:30:53Z",
   "aliases": [
     "CVE-2025-62231"
@@ -19,10 +19,6 @@
       "type": "ADVISORY",
       "url": "https://nvd.nist.gov/vuln/detail/CVE-2025-62231"
     },
-    {
-      "type": "WEB",
-      "url": "https://access.redhat.com/errata/RHSA-2025:19432"
-    },
     {
       "type": "WEB",
       "url": "https://access.redhat.com/errata/RHSA-2025:22167"
@@ -91,6 +87,14 @@
       "type": "WEB",
       "url": "https://lists.debian.org/debian-lts-announce/2025/10/msg00033.html"
     },
+    {
+      "type": "WEB",
+      "url": "https://lists.x.org/archives/xorg-announce/2025-October/003635.html"
+    },
+    {
+      "type": "WEB",
+      "url": "https://access.redhat.com/errata/RHSA-2025:19432"
+    },
     {
       "type": "WEB",
       "url": "https://access.redhat.com/errata/RHSA-2025:19433"

advisories/unreviewed/2025/12/GHSA-j77f-3hf7-7rvg/GHSA-j77f-3hf7-7rvg.json

@@ -1,7 +1,7 @@
 {
   "schema_version": "1.4.0",
   "id": "GHSA-j77f-3hf7-7rvg",
-  "modified": "2025-12-22T09:31:24Z",
+  "modified": "2026-04-20T15:31:50Z",
   "published": "2025-12-03T12:30:14Z",
   "aliases": [
     "CVE-2025-13947"
@@ -67,6 +67,10 @@
       "type": "WEB",
       "url": "https://access.redhat.com/security/cve/CVE-2025-13947"
     },
+    {
+      "type": "WEB",
+      "url": "https://bugs.webkit.org/show_bug.cgi?id=271957"
+    },
     {
       "type": "WEB",
       "url": "https://bugzilla.redhat.com/show_bug.cgi?id=2418576"

advisories/unreviewed/2026/02/GHSA-889r-wfhc-6g6c/GHSA-889r-wfhc-6g6c.json

@@ -25,7 +25,9 @@
     }
   ],
   "database_specific": {
-    "cwe_ids": [],
+    "cwe_ids": [
+      "CWE-345"
+    ],
     "severity": "MODERATE",
     "github_reviewed": false,
     "github_reviewed_at": null,

advisories/unreviewed/2026/02/GHSA-jgvp-6mmr-4mrw/GHSA-jgvp-6mmr-4mrw.json

@@ -25,7 +25,9 @@
     }
   ],
   "database_specific": {
-    "cwe_ids": [],
+    "cwe_ids": [
+      "CWE-294"
+    ],
     "severity": "HIGH",
     "github_reviewed": false,
     "github_reviewed_at": null,

advisories/unreviewed/2026/02/GHSA-m7h2-p2wj-5964/GHSA-m7h2-p2wj-5964.json

@@ -25,7 +25,9 @@
     }
   ],
   "database_specific": {
-    "cwe_ids": [],
+    "cwe_ids": [
+      "CWE-294"
+    ],
     "severity": "MODERATE",
     "github_reviewed": false,
     "github_reviewed_at": null,

advisories/unreviewed/2026/03/GHSA-2vwv-vqpv-v8vc/GHSA-2vwv-vqpv-v8vc.json

@@ -1,7 +1,7 @@
 {
   "schema_version": "1.4.0",
   "id": "GHSA-2vwv-vqpv-v8vc",
-  "modified": "2026-04-20T09:30:44Z",
+  "modified": "2026-04-20T15:31:51Z",
   "published": "2026-03-30T09:31:29Z",
   "aliases": [
     "CVE-2026-5121"
@@ -59,6 +59,10 @@
       "type": "WEB",
       "url": "https://access.redhat.com/errata/RHSA-2026:8908"
     },
+    {
+      "type": "WEB",
+      "url": "https://access.redhat.com/errata/RHSA-2026:9026"
+    },
     {
       "type": "WEB",
       "url": "https://access.redhat.com/security/cve/CVE-2026-5121"

advisories/unreviewed/2026/03/GHSA-3p29-8vc6-r2ph/GHSA-3p29-8vc6-r2ph.json

@@ -1,13 +1,17 @@
 {
   "schema_version": "1.4.0",
   "id": "GHSA-3p29-8vc6-r2ph",
-  "modified": "2026-03-27T12:31:06Z",
+  "modified": "2026-04-20T15:31:50Z",
   "published": "2026-03-27T12:31:06Z",
   "aliases": [
     "CVE-2026-4622"
   ],
   "details": "OS Command Injection vulnerability in NEC Platforms, Ltd. Aterm Series allows a attacker to execute arbitrary OS commands via network.",
   "severity": [
+    {
+      "type": "CVSS_V3",
+      "score": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H"
+    },
     {
       "type": "CVSS_V4",
       "score": "CVSS:4.0/AV:N/AC:H/AT:N/PR:H/UI:A/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X"

advisories/unreviewed/2026/03/GHSA-73jj-x3w6-c78g/GHSA-73jj-x3w6-c78g.json

@@ -1,13 +1,17 @@
 {
   "schema_version": "1.4.0",
   "id": "GHSA-73jj-x3w6-c78g",
-  "modified": "2026-03-27T12:31:06Z",
+  "modified": "2026-04-20T15:31:50Z",
   "published": "2026-03-27T12:31:06Z",
   "aliases": [
     "CVE-2026-4619"
   ],
   "details": "Path Traversal vulnerability in NEC Platforms, Ltd. Aterm Series allows a attacker to wtite over any file via network.",
   "severity": [
+    {
+      "type": "CVSS_V3",
+      "score": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H"
+    },
     {
       "type": "CVSS_V4",
       "score": "CVSS:4.0/AV:N/AC:H/AT:N/PR:H/UI:N/VC:L/VI:H/VA:H/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X"